Preventing unauthorized token creation
The most effective way to prevent unauthorized token creation is not documentation — it is linting. Hardcoded color values (hex codes, rgb() calls, or hsl() values that are not references to tokens) can be caught by custom ESLint rules, Stylelint rules, or design system linters like Knapsack or Specify. When every hardcoded color in a PR is automatically flagged as a linting error, designers and engineers are forced to either use an existing token or formally propose a new one. Formal token proposals create the organizational friction that prevents casual duplication. Without this friction, tokens multiply indefinitely.
